Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E639481EF47A11EF8F478560762E951A.roa
File: E639481EF47A11EF8F478560762E951A.roa (raw, json)
Hash identifier: v956MO3wy6ydwTkOhxuNCrMy8v8YSBN8vdOdK6/8rMQ=
Subject key identifier: 84:D1:46:E3:48:26:9D:21:4A:BF:D3:D6:BE:71:5D:F3:A3:82:A8:4F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0165C6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E639481EF47A11EF8F478560762E951A.roa
Signing time: Wed 26 Feb 2025 19:50:16 +0000
ROA not before: Wed 26 Feb 2025 19:50:12 +0000
ROA not after: Sat 19 Feb 2028 19:50:12 +0000
asID: 17561
IP address blocks: 154.218.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91590 (0x165c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 19:50:12 2025 GMT
Not After : Feb 19 19:50:12 2028 GMT
Subject: CN=67bf7078-a4e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:68:65:34:a7:dd:c2:65:ef:43:e3:ef:38:34:
f8:c9:28:ae:be:97:9e:57:5c:eb:ef:e0:8c:ce:df:
90:39:2f:60:41:3b:93:0b:d1:64:7a:8a:21:84:90:
e7:aa:aa:5e:f2:0e:06:af:aa:a5:63:45:de:32:8e:
14:27:b9:57:49:51:f2:86:4a:43:c7:86:03:cd:22:
cd:0b:68:15:63:9b:12:a0:0a:cf:d8:e7:1a:53:e0:
42:ee:4e:cf:8e:72:2c:ad:54:19:76:1f:9d:77:bd:
f1:86:89:c9:42:e3:49:8b:e2:1d:ed:31:f2:1c:43:
fb:ac:17:77:8e:91:c4:ed:7e:21:2f:19:88:ee:86:
85:02:ae:f7:48:5b:c6:f8:99:16:b6:72:81:54:b6:
ba:fb:98:2f:22:02:b5:ad:3e:fb:34:09:9b:eb:48:
a3:68:d7:0d:6e:57:1d:10:a9:27:98:9f:da:01:c9:
37:15:f8:d7:d0:31:0a:4c:77:50:14:94:45:32:54:
38:cc:a6:0e:69:dd:1b:4a:90:b0:87:b5:95:b8:9f:
f0:5a:32:9e:a0:4d:10:c5:79:f3:94:02:41:3f:6a:
05:72:85:5f:f9:2b:45:c8:cd:4a:85:35:88:bd:51:
b3:4c:85:d3:17:28:04:6a:71:7a:b7:b4:2d:e3:9a:
60:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:D1:46:E3:48:26:9D:21:4A:BF:D3:D6:BE:71:5D:F3:A3:82:A8:4F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E639481EF47A11EF8F478560762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.53.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:32:e1:5d:04:00:1d:f7:76:22:e1:55:da:33:34:16:38:ce:
71:7b:06:3c:ad:ed:47:6b:d8:22:c8:e5:57:07:b5:2e:c2:ed:
f4:a9:c4:56:dc:f4:bc:8d:e4:0b:20:fc:5f:d3:af:77:ef:e2:
79:8d:7d:6a:f4:8a:47:77:ce:f0:04:02:e9:9e:b3:ab:18:cf:
d2:9b:18:c6:8b:cc:4a:67:6f:bb:6b:70:68:6e:c1:5f:8b:22:
ad:01:2d:31:5c:d9:40:9f:25:ce:91:cd:f3:40:eb:81:14:56:
1c:4a:e0:4c:c5:b5:42:02:12:05:95:8c:7e:88:49:ce:ca:9b:
38:39:6f:84:35:7e:08:14:0d:27:b5:9b:6c:67:b5:f9:f9:09:
33:ba:33:ee:31:3b:5d:6a:2d:6d:81:93:13:42:76:a1:41:c4:
54:70:31:e9:8e:d4:ef:bd:65:2a:0a:7e:77:5f:e2:75:e0:b8:
eb:d6:6b:4e:03:8a:fd:a8:cd:ee:79:f7:0e:57:4c:dc:22:17:
43:04:16:d3:93:55:97:51:5e:21:80:0d:c7:71:a3:0d:5f:e2:
f3:2e:ff:dc:44:c1:51:52:11:9f:0f:87:1e:cd:63:4a:f7:37:
c3:94:5d:ce:d7:77:5f:d7:22:0d:00:f5:47:eb:0b:7f:2b:3e:
5f:e3:b4:9f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWXGMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI2MTk1MDEyWhcNMjgwMjE5MTk1MDEyWjAYMRYw
FAYDVQQDEw02N2JmNzA3OC1hNGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwGhlNKfdwmXvQ+PvODT4ySiuvpeeV1zr7+CMzt+QOS9gQTuTC9Fkeooh
hJDnqqpe8g4Gr6qlY0XeMo4UJ7lXSVHyhkpDx4YDzSLNC2gVY5sSoArP2OcaU+BC
7k7PjnIsrVQZdh+dd73xhonJQuNJi+Id7THyHEP7rBd3jpHE7X4hLxmI7oaFAq73
SFvG+JkWtnKBVLa6+5gvIgK1rT77NAmb60ijaNcNblcdEKknmJ/aAck3FfjX0DEK
THdQFJRFMlQ4zKYOad0bSpCwh7WVuJ/wWjKeoE0QxXnzlAJBP2oFcoVf+StFyM1K
hTWIvVGzTIXTFygEanF6t7Qt45pgZwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFITR
RuNIJp0hSr/T1r5xXfOjgqhPMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FNjM5NDgxRUY0N0ExMUVGOEY0Nzg1NjA3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmto1MA0GCSqGSIb3DQEB
CwUAA4IBAQCwMuFdBAAd93Yi4VXaMzQWOM5xewY8re1Ha9giyOVXB7Uuwu30qcRW
3PS8jeQLIPxf06937+J5jX1q9IpHd87wBALpnrOrGM/SmxjGi8xKZ2+7a3BobsFf
iyKtAS0xXNlAnyXOkc3zQOuBFFYcSuBMxbVCAhIFlYx+iEnOyps4OW+ENX4IFA0n
tZtsZ7X5+QkzujPuMTtdai1tgZMTQnahQcRUcDHpjtTvvWUqCn53X+J14Ljr1mtO
A4r9qM3uefcOV0zcIhdDBBbTk1WXUV4hgA3HcaMNX+LzLv/cRMFRUhGfD4cezWNK
9zfDlF3O13df1yINAPVH6wt/Kz5f47Sf
-----END CERTIFICATE-----
Generated at Thu Apr 10 23:48:26 2025 by rpki-client